Vigor 2832 ADSL Router Firewall

Overview

Vigor 2832 Series ADSL Router Firewall

The Vigor 2832 series (including the Vigor 2832n) is our new router/firewall for ADSL lines. Alternative WAN ports can insead provide connectivity to Ethenet feeds, secondary xDSL modems or a 3G/4G cellular service using a supported USB adaptor. This latest router series includes support for professional features such as VLAN tagging, Gigabit Ethernet built-in WiFi ('n' models).

Packed with professional-level features, the Vigor 2832 series is compatible with all UK variants of ADSL (including ADSL2+ and Annex M) and the Vigor 2832 can also be used for cable-modem, leased line and EFM applications using its Gigabit Ethernet WAN port.

A 4-port Gigabit Ethernet switch on the LAN side provides high speed connectivity for your server, other local PCs or for uplink to a larger Ethernet switch. Comprehensive security features include content filtering, web application controls and an object based firewall management system.

WAN Load Balancing & Backup

The Vigor 2832 can connect directly to an ADSL / ADSL2+ line. WAN2 is a Gigabit Ethernetport and can connect to a secondary modem/connection, such as another ADSL or VDSL modem.

The Vigor 2832 features three methods of WAN connectivity - ADSL, Ethernet (Gigabit) and two USB ports for connection of a 3G/4G modem. The Ethernet port can connect to a second ADSL or VDSL modem (e.g. Vigor 120 or Vigor 130), a cable modem or any other Ethernet-based Internet feed. The multiple WAN interfaces can be used either for WAN-Backup or load balancing. Load-balancing or failover supports IPv4 only currently.

WAN-Backup provides contingency (redundancy) in case of your primary ADSL line or ISP suffering temporary outage). Internet Traffic will be temporarily routed via the secondary Internet access. When normal services is restored to your primary ADSL line, all traffic is switched back to that.

If you don't have ADSL, the Ethernet WAN port can instead be used as your primary/only Internet connection (using NAT) so the same router can be used regardless of whether you have xDSL or Ethernet Internet connections currently.

The USB ports provide Internet connectivity (main, backup or load balanced) by connecting to a compatible USB modem (or cellphone) for access to the high speed 3G / 4G cellular networks from UK providers such as Vodafone, O2, 3 and EE / BT. If you don't have ADSL at all, the USB 3G / 4G access method can be used as your primary/only Internet connection, ideal for temporary locations, mobile applications or where broadband access is not available.

VPN - Linking remote offices, HQ, teleworkers and mobile staff

A feature central to DrayTek routers is the VPN (Virtual Private Networking) features. A VPN enables you to link two remote offices, branch offices back to HQ or home-based/mobile teleworkers back to your office. Once connected, they have access to your office/remote resources through a secure encrypted tunnel allowing remote desktop, file sharing and seamless access to other resources and devices.

The Vigor 2832 allows you to set up up to 32 simultaneous VPN tunnels to remote offices or teleworkers using PPTP, IPsec or L2TP protocols. Teleworkers can authenticate directly with your LDAP server if preferred. The Vigor 2832 also allows remote workers to dial-in with SSL VPNs with up to 10 simultaneous SSL VPN tunnels.

You can learn more about DrayTek VPNs generally here and SSL VPNs here.

Web Content Filtering

The content control features of the Vigor 2832 allows you to set restrictions on web site access, blocking download of certain file or data types, blocking specific web sites with whitelists or blacklists, blocking IM/P2P applications or other potentially harmful or wasteful content. Restrictions can be per user, per PC or universal.

Using DrayTek's Cyren service, you can block whole categories of web sites (e.g. gambling, adult sites etc.), subject to an annual subscription to the Globalview service, which is continuously updated with new or changed site categorisations or sites which have become compromised (such as infected with Malware). A free 30-day trial to Cyren content filtering is included with your new router.

Robust & Comprehensive Firewall

Security is always taken seriously with DrayTek routers. The firewall protects against attacks including DoS (Denial of Service) attacks, IP-based attacks and access by unauthorised remote systems. Wireless, Ethernet and VPN are also protected by various protection systems.

The DrayTek object-based firewall allows even more setup flexibility than ever, enabling you to create combinations of users, rules and restrictions to suit multi-departmental organisations. The Vigor 2832 also allows selective direction firewall rules of LAN to WAN, WAN to LAN or LAN to VPN. In addition, QoS (Quality of Service Assurance) can be selectively applied to specific users within your NAT subnet according to source or destination IP address.

Rack Mounting Kit

The RM1 Rackmount Bracket enables you to fit any Vigor2832 series router into a standard 19" rack or cabinet.

The bracket takes up one rack slot (1U) and includes a cable retainer at the back to keep the power cord captive. The front mounted sockets of the router remain fully accessible. For wireless models, we then recommend extension aerials (or aerial extensions).

3G/4G/LTE Cellular Data Features

On the Vigor 2832 series, the USB port can host a compatible 3G/4G USB modem for access to the cellular network for full Internet Access.

The 3G/4G connection can be used as your primary/only Internet access, or as backup to your main ADSL line connection. This facility is ideal for homes or offices which don't want to pay fixed line + broadband rental and also for temporary locations, or those to where fixed lines aren't available but for businesses, having 3G/4G as a failover to your main connectivity means that your business stays online when your broadband doesn't!.

With the Vigor 2832n, your local users can be connected wirelessly to the router, so instant free 'hotspots' can be deployed quickly and easily. Mains power is required for the router's PSU, but this could be from a mobile generator or equivalent so you need to plan for this.

Please check here for the latest USB modem compatibility; the phone companies (Vodafone, EE, O2, 3 etc.) continuously introduce new models, so additional Modem Support is added continuously. If you have a new modem, not yet supported, please contact us as support for new models is frequently added. Also it is possible to obtain logs for our engineers to assess.

Note: DrayTek have no control over local network/provider operations, changes in network facilities/tariffs nor make any claim over specific network compatibility. Please assure yourself that the router will be compatible with your chosen cellular network and USB adaptor and that you have adequate signal coverage before committing to any contract term. Please also ensure that your chosen provider and the tariff allows access to all of your required applications (e.g. VPN, VoIP etc.).

Features

Network & Management Features

802.1q Tagged, Wireless & Port Based VLAN

The Vigor 2832 features a hugely flexible VLAN system. In its simplest form, each of the four Gigabit LAN ports can be isolated from each other, for example to feed different companies or departments but keeping their local traffic completely separated. For more sophisticated scenarios, the Vigor 2832 includes tagged VLANs (802.1q) whereby data is marked with a VLAN identifier. This identifier can be read by an onward Ethernet switch and directed to specific ports or just passed to the LAN for specific VLAN clients to pick up; priorities can also be applied for LAN-side QoS.

The VLANs can be tied to any other individual 4 RJ45 ports on the front of the Vigor 2832, or, by the use of VLAN tagging, you can uplink to a larger switch and retain the separation for larger groups. The VLANs can each be tied into each of the different IP subnets that the router may also be operating, to provide even more isolation.

On the Wireless-equipped models (Vigor2832n) each of the wireless SSIDs can also be grouped within one of the VLANs. Each individual private subnet can be independent (isolated) or common (able to communicate with each other). This is ideal for departmental or multi-occupancy applications.

To learn more about the DrayTek's Vigor 2832's VLAN capabilities, click here.

IPv6 - Next Generation Internet Routing

The Vigor 2832 supports IPv6 - the successor to the current IPv4 addressing system that has been used since the Internet was first created. IPv4 address space is full up and IPv6 allows for much more efficient routing and a larger address space. IPv6 is supported both from your own ISP, but if your ISP does not (yet) support IPv6, the Vigor 2832 also supports IPv6 broker/tunnel services to provide IPv6 access using either TSPC or AICCU via 3rd party IPv6 providers. To learn all about IPv6, you can get our detailed guide to IPv6 here.

User Management & Authentication

Up to 200 User Profiles:

Status Information presented to Users:

The Vigor 2832 series has built-in user management which allows you to provide internet access to users based on their own unique login (stored in the router, or on an external Radius server). Accounts can be restricted by schedules or maximum usage times but also any other aspect of the firewall or content filtering can be applied on a user-by-user basis.

For example, a sales department might not be allowed access to social networking sites except at lunch time, or in a school, teachers and staff have more access permitted than pupils. This works with Wireless (WiFi) clients too so is ideal for guest or temporary access as users can be isolated from the rest of the company LAN.

To learn more about the Vigor 2832 series User Management capabilities, click here.

User Status & Management:

USB Features

Network Attached Storage (NAS)

The Vigor 2832's USB port can also be used to add storage memory to the unit in the form of a USB memory key (as shown right) or for higher capacity a USB hard drive (normally requires its own power).

The Vigor 2832 then provides FTP access file uploading/downloading which can be from the local LAN or from anywhere on the Internet - ideal for a simple to deploy file depository. Access can be 'public' or using usernames and passwords, each of which can have their own directories and/or file access rights. As well as FTP, file sharing is available as a Windows 'network drive'. You can also use Windows Explorer to view and access the contents of the USB drive.

If you do have a USB memory key connected, you can also have the router save it's system logs (syslog) to that memory instead of to a connecting computer; useful for technical personnel (SysAdmins).

The NAS facility uses any FAT32 formatted device (includes USB memory sticks, USB hard drives etc.) and supports a transfer rate of 12Mb/s so ideal for occasional or remote storage. For larger hard drives, you may need a separate power supply or powered USB hub.

USB Thermometer

With the installation of the optional USB thermometer, the Vigor 2832 can take continuous temperature readings from the vicinity of the router. This USB thermometer connects to the router's USB port either directly or placed nearby using the supplied 1 Metre USB extension cable.

You can log into the router at any time and see the current temperature and the previous 24-hour's high/low as well as graphs. You can set thresholds so that if it gets too hot or too cold at the sensor, you'll receive an email or SMS (text message).

Typical applications will be to report the temperature in your comms/IT cabinet or room, but also the general office temperature, depending on the placement of the temperature 'dongle'. USB typically allows a maximum cable length of up to 3M.

Specifications

Vigor 2832 ADSL Series

The Vigor 2832 Series comes in several different models depending on the features required. Please double check when ordering that you have selected the correct product and a product intended for the correct region/network.

The EAN is a barcode number which identifies the unique specific product type. It is separate to the product serial number which is unique to each product. The EAN will also appear on your product box when you receive it so you can double check that you have been sent the right product.

These product codes are for UK/Irish products only. Please check with your local DrayTek office for the correct part nos. for your region if you are not in the UK/IE to ensure that you get the correct hardware, firmware and local support/warranty.

Screenshots

Vigor 2832 Router Web Interface Screenshots

Dashboard

Web Content Filtering

Diagnostic Tools

Wireless LAN Access Point Scanning

Vigor 130 WAN information

WAN2 on the Vigor 2832 is an Ethernet port to which you can connect any Ethernet Internet feed. This can also be used to connect DrayTek's Vigor 130 DSL model in order to connect a second ADSL or VDSL line to the Vigor 130.

When the Vigor 2832 is used with the Vigor 130, the Vigor 2832 can report the DSL line statistics from the Vigor 130 in its own web interface (above) alongside the built-in DSL interface.